Which cloud platforms does this security skill cover?

It provides security implementation patterns specifically for AWS, Azure, and HashiCorp Cloud platforms.

Does it support security scanning tools?

The skill provides ready-to-use configurations for popular scanners like Checkov and tfsec to identify infrastructure vulnerabilities early.

How does this skill handle sensitive secrets in Terraform?

The skill implements patterns that use data sources from providers like HashiCorp Vault and AWS Secrets Manager, ensuring secrets are never hardcoded in your configuration files.

Can I use this for automated compliance checks?

Yes, it includes configurations for OPA (Open Policy Agent), Conftest, and Sentinel to enforce organizational policies as code.

Terraform Security Patterns

Name: Terraform Security Patterns
Author: pluginagentmarketplace

bypluginagentmarketplace

•

보안 및 테스팅

Secures infrastructure as code by implementing robust secrets management, automated compliance scanning, and policy enforcement.

This skill empowers Claude to architect and implement production-grade security measures for Terraform environments. It provides specialized guidance on managing sensitive data through HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault, while enforcing organizational standards using Policy as Code frameworks like OPA/Conftest and Sentinel. By integrating automated scanning tools like Checkov and tfsec, the skill ensures that infrastructure is audited for vulnerabilities and misconfigurations before deployment, maintaining a high security posture across all cloud providers.

주요 기능

01End-to-end encryption patterns for S3, RDS, and EBS resources

02Cross-cloud secrets management for Vault, AWS, and Azure

03Automated security scanning with Checkov and tfsec configurations

04Best practices for sensitive data protection and variable masking

05Policy as Code integration using OPA, Conftest, and Sentinel

061 GitHub stars

사용 사례

01Establishing zero-trust secrets management for production IaC

02Implementing automated compliance guardrails in CI/CD pipelines

03Remediating security vulnerabilities in existing Terraform configurations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add pluginagentmarketplace/custom-plugin-terraform terraform-security

For use in Claude.ai and ChatGPT

Download Skill